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RECEIVED 

AppUcauonNo.: 10/001.449 CENTRAL FAX CENTER 

MAY 1 1 2006 

AMENDMEN TS TO THE CLAIMS 

This Usting of clainis wiU replace all prior versions and listings of claims in the 
application. 

T.TSTTNG OF CLAIMS : 

1 . (Currently Amended) In a cUent-seiver-document repositoiy system, a secure 
method for remote action by reference, comprising: 

I establishing a caramunication channel d»eetiy^jeween the client and the server via one 

of a wireless link and a landline; 

sending, from the client to the server via the communication channel, nser credentials 
pertaining to a document stored in a document repository and requesting an action be performed 
on the document, a delegation credential giving pennissian to the server to obtain the document 
from the document repository and permitting the server to perform the action on the document on 
the user's behalf and the address of the document in the document repositorjr, 

verifying, at the server, the user's credentials and the delegation credential; 

if verified, sending, frora the server to the document repository, server credentials, the 
delegation credential and the address of the document; 

verifying, at the document r^sitory, the server's credentials and the delegation 

credential; 

if verified, sending the document from the document repository to the server; and 
performing the action on the document at the server. 

2. (Original) The method of claim 1 , wherein the server comprises a printer. 

3. (Original) The method of claim 1, wherein the server comprises a multi- 
function device for printing, faxing and scanning. 

4. (previously Presented) The method of claim 1 , fUnher comprising establishing 
a secure connection between the client and server prior to sending the user credentials, delegation 
credential and address of the document 
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5. (Previously Pi«sented) The method of claim 1 , wherein the document address 
comprises a URL. 

6. (Original) The method of claim 1, wherein the delegation credential 
comprises a certificate signed by the client and including the delegator, delegatee, URL of the 
document to be fetched, URL of the server, access rights and constraints delegated to the server. 

7. (Original) The method of claim 1, wherein the cliem comprises a mobile 

device. 

8. (Original) The method of claim 7, wherein the mobile device comprises a 

PDA, 

9. (Origjjial) The method of claim 7, wherein the mobile device comprises a cell 

phone. 

10. (Original) The method of claim 1, wherein the delegation credential includes 
a time limit, wherein upon expiration of the time limit, the server's pennissions expire. 

1 1 . (Original) The method of claim 1 , fiulher comprising: 

sending, from the client to the server, a delegation credential for authorizing payment for 
the action to be performed by the server; 

sending, from the server to a payment provider, server credentials and the payment 

delegation credential; 

veritying, at the payment provider, the server's credentials and the payment delegation 
credential, and if valid directing payment to tiie server. 

12. (Original) The method of claim 1, wherein the delegation credential 
comprises a Satchel token. 
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13. (Original) The method of claim 1, wherein the delegation credential 
comprises an SPKJ cerdficate. 

14. (Original) The method of claim 1 , wherein the server comprises a printer and 
the action comprises printing the document and wherein the verifying step comprises verifying if 
the cUent has rights on the printer and if not sending an eiror message to the client. 

15. (Original) The method of claim 14, fUnher comprising verifying, at the 
printer, if sufHcient media is available. 

16. (Original) The method of claim 15, funhfir comprising, upon printing the 
document, sending the client a notice. 

1 7. (Original) The mefliod of claim 3, wherein the delegation credential includes 
the client's access rights associated vnxh the document and constraints on the server. 

1 8. (Original) The method of claim 1 7, wherein the client's access rights include 
printing, faxing, copying and fetching and wherein the server's constraints include a 
predetermined number of copies that may be made and a predetermined period of time in which 
actions on the document may be provided. 

19. (Currently Amended) Tn a client-server-documem repository system, a secure 
method for remote action by reference, comprising: 

I establishing a communication channel di*ee^between the client and the server via one 

of a wireless link and a landline; 

sending, fiom the client to the server via the communication channel, user credentials to 
release a plurality of documents stored in a documem repository and a plurality of delegation 
credentials, wherein each delegation ciedential includes permissions for the server to obtain a 
document from the doctuncnt repository and to perform an action on die document on the user's 
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behalf and die address of die document; 
for each del egation cxedential, 

verifying, at the server, the user's credentials and the delegation credential; 
if verified, sending, from the server to the document repository, server credentials, the 
delegation credential and the address of the document; 

verifying, at the document repository, the server's credentials and the delegation 

credential; 

if verified, sending the document from the document repository to the server; and 
perfomiing the action on the document at the server. 

20. (Currently Amended) hi a client-server-document repository system, a secure 
method for remote action by reference, comprising: 

estabHshing a secure communication channel dtfee^between the client and a document 
lepository via one of a wireless link and a landline; 

sending, from the cUem to the document repository via the communication channel, user 
credentials pertaining to a document stored in the document repository, a delegation credential 
giving permission to a server to obtain the document from the document repository, requesting an 
action be performed on the document at a server and pennitting the server to perform the action 
on the document on the user's behalf, the address of the server and die address of the document 
in the document repository; 

verifying at the document repository the user's credentials; 

if verified, sending from the document repository to the server, the document repository's 
credentials, the delegation credential and the document; and 

verifying, at the server, the document repository's credentials and the delegation 

credential; 

if verified, perfonning the action on the document at the server. 
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